This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft File: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft (raw, json) Hash identifier: Z++397+GuCV4jO0bxEoAU6Rp1p1Bzsqk0Jn1IJGrIhY= Subject key identifier: 48:1D:D2:1A:A4:FF:54:D1:9B:5A:07:67:E6:46:6B:EE:73:36:90:13 Authority key identifier: 6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 Certificate issuer: /CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Certificate serial: 7C021A9E9D9FDD6347DB292DCE21D108834F2351 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft Manifest number: 01FE Signing time: Fri 19 Dec 2025 05:11:33 +0000 Manifest this update: Fri 19 Dec 2025 05:06:33 +0000 Manifest next update: Mon 22 Dec 2025 14:04:33 +0000 Files and hashes: 1: 3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa (hash: wyY3CPGpB3zzZUc8QiVL+ydL4s6XrQRhF73erj2QQSs=) 2: 3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (hash: sksB0+JpfamOk8agUpLTqgwXQckz8CSkrdrAWOtJ4OI=) 3: 3130332e3132362e3131362e302f32332d3234203d3e20313333383030.roa (hash: xdEDtfm0tP7FMpWiWg9KdIp8IvvJjKZMSw6HMfYr844=) 4: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl (hash: qDU5grPKvdMPBm76jKCYqk4Ft2RqM/s2ongX/TipnCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 14:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:02:1a:9e:9d:9f:dd:63:47:db:29:2d:ce:21:d1:08:83:4f:23:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Validity Not Before: Dec 19 05:06:33 2025 GMT Not After : Dec 22 14:04:33 2025 GMT Subject: CN=481DD21AA4FF54D19B5A0767E6466BEE73369013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:d4:91:6f:91:52:ee:89:13:50:82:a1:7b: 6d:15:d6:dd:f0:9a:bb:d5:f4:68:49:3e:39:91:04: c1:5f:09:39:e0:d4:0a:4a:e9:f5:93:c8:1a:84:31: 9e:ee:78:01:b6:ff:3a:45:0e:0c:75:a1:9a:53:78: 80:1f:6c:56:95:18:22:92:27:1d:32:28:87:db:bb: 68:2e:6f:21:7e:55:8e:e1:ac:ce:de:0a:a2:59:f3: 81:1a:23:02:b0:c0:47:66:bd:d3:ae:64:f6:0a:f8: a3:ad:17:80:c8:32:ed:03:d4:35:4d:c8:4f:4a:00: ec:5e:22:f6:88:27:15:40:d2:9c:6f:90:c9:fa:24: f1:fd:77:65:af:bf:2a:45:53:df:94:81:28:c2:0b: 55:8a:b0:b9:f4:ac:45:83:1a:00:f1:cc:41:4f:14: a3:c5:bf:f1:43:ea:07:36:b3:e5:a6:e4:a2:72:d3: f7:30:34:58:48:75:b7:d6:71:ab:8e:6f:8c:91:80: 02:c8:6b:70:c4:aa:d0:b1:89:f3:1f:6e:28:d0:7e: c4:f8:25:a2:dc:dc:bc:3c:cc:c6:c6:f3:06:66:0d: 60:94:85:a6:74:79:67:eb:ff:1e:04:5e:fb:45:28: a5:8c:6f:76:00:9a:56:a8:05:a3:b7:8f:76:33:e1: 15:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1D:D2:1A:A4:FF:54:D1:9B:5A:07:67:E6:46:6B:EE:73:36:90:13 X509v3 Authority Key Identifier: keyid:6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:9c:47:dc:36:8c:80:96:1c:6e:a9:84:cd:61:ca:48:3c:f5: c0:5c:2d:08:db:7e:9c:c7:e7:a1:60:1d:c3:f4:fc:d5:c6:55: b4:59:9a:b0:53:5d:ae:e5:b8:23:5a:23:5e:fa:0a:85:b7:0c: 0c:ae:f2:87:42:64:ea:1f:4d:70:26:3c:86:77:3c:1a:4a:2c: 7e:22:f1:fb:3f:c0:f1:22:05:4a:c1:04:b8:c3:0f:7b:fc:94: c2:86:7f:c8:19:7b:6d:03:b0:08:77:1f:e2:4f:a3:3a:6e:d3: 0a:da:ae:a7:aa:5b:0a:fe:b9:18:6b:1b:76:e4:0a:aa:b1:99: d7:0e:51:fe:9d:34:c4:d8:35:9a:f6:27:07:1c:82:57:e6:51: d0:e0:a4:5d:c8:44:5d:7b:d3:33:be:6a:79:10:c9:03:a8:23: 82:da:5d:77:f8:41:69:48:3e:4a:45:e3:d0:b6:73:c3:6c:e4: e6:92:40:e7:92:61:ff:70:7d:6e:89:35:2a:ff:8a:21:0f:df: b7:12:1d:36:83:2b:b9:b0:1c:38:6c:3d:d3:f9:b5:16:de:14: 42:40:ae:9a:e4:b9:b2:81:d6:58:82:82:98:e4:62:aa:2b:6a: 2c:de:40:ef:77:9e:5d:94:63:4a:a8:ea:4e:6c:b6:67:81:f1: ff:75:82:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfAIanp2f3WNH2yktziHRCINPI1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdE MDJGNDdFODAeFw0yNTEyMTkwNTA2MzNaFw0yNTEyMjIxNDA0MzNaMDMxMTAvBgNV BAMTKDQ4MUREMjFBQTRGRjU0RDE5QjVBMDc2N0U2NDY2QkVFNzMzNjkwMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFA9SRb5FS7okTUIKhe20V1t3w mrvV9GhJPjmRBMFfCTng1ApK6fWTyBqEMZ7ueAG2/zpFDgx1oZpTeIAfbFaVGCKS Jx0yKIfbu2gubyF+VY7hrM7eCqJZ84EaIwKwwEdmvdOuZPYK+KOtF4DIMu0D1DVN yE9KAOxeIvaIJxVA0pxvkMn6JPH9d2WvvypFU9+UgSjCC1WKsLn0rEWDGgDxzEFP FKPFv/FD6gc2s+Wm5KJy0/cwNFhIdbfWcauOb4yRgALIa3DEqtCxifMfbijQfsT4 JaLc3Lw8zMbG8wZmDWCUhaZ0eWfr/x4EXvtFKKWMb3YAmlaoBaO3j3Yz4RWRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSB3SGqT/VNGbWgdn5kZr7nM2kBMwHwYDVR0j BBgwFoAUbfioc7cLqMytoxqt2CFf99AvR+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 N2QyNmRlMC02OGNmLTQyOWMtOGIwZS04ZDY0Yjc2MmY4MjQvMC82REY4QTg3M0I3 MEJBOENDQURBMzFBQUREODIxNUZGN0QwMkY0N0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdEMDJG NDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTdkMjZkZTAtNjhjZi00MjljLThi MGUtOGQ2NGI3NjJmODI0LzAvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVG RjdEMDJGNDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImcR9w2jICWHG6phM1hykg89cBcLQjbfpzH 56FgHcP0/NXGVbRZmrBTXa7luCNaI176CoW3DAyu8odCZOofTXAmPIZ3PBpKLH4i 8fs/wPEiBUrBBLjDD3v8lMKGf8gZe20DsAh3H+JPozpu0wrarqeqWwr+uRhrG3bk CqqxmdcOUf6dNMTYNZr2JwccglfmUdDgpF3IRF170zO+ankQyQOoI4LaXXf4QWlI PkpF49C2c8Ns5OaSQOeSYf9wfW6JNSr/iiEP37cSHTaDK7mwHDhsPdP5tRbeFEJA rprkubKB1liCgpjkYqoraizeQO93nl2UY0qo6k5stmeB8f91gks= -----END CERTIFICATE-----Generated at Sun Dec 21 07:48:52 2025 by rpki-client